Splunk Search

License Usage by Each Indexer

vishaltaneja070
Motivator

License Usage by Each Indexer : Need to find license usage by each indexer.

Labels (2)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @vishaltaneja070,

see in [Settings -- Licensing -- Previous 30 days] and in the "Split by" dropdown, choose "Indexer".

You can reach the same result using the Splunk Monitoring Console: [Settings -- Monitoring Console -- Indexing -- License Usage -- Previous 30 days ] and in the "Split by" dropdown, choose "By Indexer"

Ciao.

Giuseppe

View solution in original post

_gkollias
Builder

You could also run the following search:

index=_internal sourcetype=splunkd component=LicenseUsage type=Usage 
| stats sum(eval(round(b/1024/1024/1024,2))) as indexed_gb by splunk_server

Thanks!

Greg

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @vishaltaneja070,

see in [Settings -- Licensing -- Previous 30 days] and in the "Split by" dropdown, choose "Indexer".

You can reach the same result using the Splunk Monitoring Console: [Settings -- Monitoring Console -- Indexing -- License Usage -- Previous 30 days ] and in the "Split by" dropdown, choose "By Indexer"

Ciao.

Giuseppe

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...